CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 10 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
The Hacker News
LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared Server
A critical vulnerability in LiteSpeed Web Server Enterprise could let a low-privilege website user gain root access on a shared-hosting server, cPanel warned in an advisory published on September 14. ...
-
The Hacker News
Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution
Cisco has warned that a new critical vulnerability impacting AsyncOS Software for Cisco Secure Email Gateway has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-7646 ...
-
The Hacker News
China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE
A Chinese threat actor has been attributed to a spear-phishing campaign that exploits recently patched security flaws in Google Chrome and Microsoft Windows to deliver a malicious JavaScript backdoor ...
-
Dark Reading
'Sandworm' Chains Cisco Vulnerabilities to Deploy Cyclops Blink
4 Min ReadSource: ratpack223 via Getty ImagesA likely Russian threat actor is deploying a sophisticated malware implant capable of harvesting credentials, scanning internal networks, and capturing liv ...
-
Dark Reading
Maximum Severity GitLab Flaw Puts Supply Chains at Risk
Rob Wright,Senior News Director,Dark ReadingSeptember 14, 20263 Min ReadSource: Infinite Creations via Getty ImagesThreat actors are exploiting a maximum-severity GitLab vulnerability disclosed last w ...
-
The Hacker News
3BB Attacker Used MeshCentral Backdoor for Root Access, Targeted Subscriber Credentials
An attacker was operating inside the network of 3BB, one of Thailand's largest broadband providers, and maintained remote control of internal machines using a legitimate management tool called MeshCen ...
-
The Hacker News
Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries
A suspected Chinese threat actor tracked as Red Heron has been attributed to the rapid exploitation of a recently disclosed security vulnerability in Gitea to compromise internet-facing instances as p ...
-
Krypt3ia
Weekly ALL-SOURCE Cyber Warfare Intelligence Brief 9.14.26
Reporting period: September 7–14, 2026Scope: State and state-aligned cyber operations, APT activity, technical campaign intelligence, active exploitation, and cyber-enabled military/intelligence activ ...
-
cert.pl
Vulnerabilities in Alior Bank "raty" module for PrestaShop
Vulnerabilities in Alior Bank "raty" module for PrestaShop CVE ID CVE-2026-7848 Publication date 14 September 2026 Vendor Alior Bank Product raty Vulnerable versions From 8.0.0 to 8.1.11 Vulnerability ...
-
The Hacker News
⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and Rootkits
AI keeps showing up in the wrong places. Attackers are using it to speed up exploits, test defenses, and automate more of the job. Some models are also crossing lines on their own. That is not a great ...